Since PR 460 [1] the Prometheus Operator is using Kubernetes Custom Resource Definitions instead of Kubernetes Third Party Resources. Permissions to handle Third Party Resources in the RBAC rules of the Prometheus Operator is thereby obsolete. [1] https://github.com/coreos/prometheus-operator/pull/460